syzbot


BUG: unable to handle kernel paging request in preempt_schedule_thunk

Status: auto-closed as invalid on 2020/11/10 23:28
Subsystems: mm
[Documentation on labels]
Reported-by: syzbot+9f9263c4717e56a925e2@syzkaller.appspotmail.com
First crash: 1350d, last: 1350d

Sample crash report:
BUG: unable to handle page fault for address: 0000000000004007
#PF: supervisor write access in kernel mode
#PF: error_code(0x0002) - not-present page
PGD 4bd50067 P4D 4bd50067 PUD 520d4067 PMD 0 
Oops: 0002 [#1] PREEMPT SMP KASAN
CPU: 1 PID: 31039 Comm: syz-executor.3 Not tainted 5.8.0-syzkaller #0
Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 01/01/2011
RIP: 0010:preempt_schedule_thunk+0x16/0x18 arch/x86/entry/thunk_64.S:40
Code: 00 00 00 77 00 77 00 70 07 00 00 77 00 70 07 00 00 00 77 00 00 00 00 77 00 70 07 00 00 77 00 00 00 77 00 77 00 70 07 00 00 77 <00> 70 07 77 00 77 00 70 07 70 07 70 07 00 00 70 07 70 07 77 00 00
RSP: 0018:ffffc9001773eb08 EFLAGS: 00010246
RAX: 0000000000004000 RBX: ffffea00009b5480 RCX: ffffffff87f31b29
RDX: ffffed10097094b1 RSI: 0000000000000008 RDI: ffff88804b84a580
RBP: ffffc9001773eb50 R08: 0000000000000000 R09: ffff88804b84a587
R10: ffffed10097094b0 R11: 0000000000000000 R12: ffffed100970973a
R13: dffffc0000000000 R14: ffffea00009b8000 R15: ffff88804b84b9d0
FS:  00007fadaac34700(0000) GS:ffff8880ae700000(0000) knlGS:0000000000000000
CS:  0010 DS: 0000 ES: 0000 CR0: 0000000080050033
CR2: 0000000000004007 CR3: 000000004bd55000 CR4: 00000000001526e0
DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000
DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400
Call Trace:
 clear_highpage include/linux/highmem.h:284 [inline]
 kernel_init_free_pages+0xff/0x120 mm/page_alloc.c:1162
 prep_new_page+0x12e/0x1f0 mm/page_alloc.c:2222
 get_page_from_freelist+0x2762/0x37f0 mm/page_alloc.c:3825
 __alloc_pages_nodemask+0x2cf/0x810 mm/page_alloc.c:4876
 __alloc_pages include/linux/gfp.h:509 [inline]
 __alloc_pages_node include/linux/gfp.h:522 [inline]
 alloc_pages_vma+0x564/0x720 mm/mempolicy.c:2236
 do_huge_pmd_anonymous_page+0x3e9/0x2230 mm/huge_memory.c:769
 create_huge_pmd mm/memory.c:4110 [inline]
 __handle_mm_fault mm/memory.c:4331 [inline]
 handle_mm_fault+0x35dd/0x43f0 mm/memory.c:4397
 faultin_page mm/gup.c:887 [inline]
 __get_user_pages+0x733/0x1760 mm/gup.c:1113
 __get_user_pages_locked mm/gup.c:1306 [inline]
 get_user_pages_unlocked+0x191/0x650 mm/gup.c:2083
 __gup_longterm_unlocked mm/gup.c:2733 [inline]
 internal_get_user_pages_fast+0x1b2e/0x2a00 mm/gup.c:2806
 get_user_pages_fast+0x49/0x70 mm/gup.c:2902
 iov_iter_get_pages+0x2a2/0x10f2 lib/iov_iter.c:1324
 __bio_iov_iter_get_pages block/bio.c:1012 [inline]
 bio_iov_iter_get_pages+0x213/0x10a0 block/bio.c:1117
 iomap_dio_bio_actor+0x782/0xf00 fs/iomap/direct-io.c:281
 iomap_dio_actor+0x95/0x530 fs/iomap/direct-io.c:388
 iomap_apply+0x2b6/0xcc0 fs/iomap/apply.c:84
 iomap_dio_rw+0x6c7/0x1230 fs/iomap/direct-io.c:506
 ext4_dio_write_iter fs/ext4/file.c:545 [inline]
 ext4_file_write_iter+0xbb8/0x1390 fs/ext4/file.c:655
 call_write_iter include/linux/fs.h:1872 [inline]
 do_iter_readv_writev+0x532/0x7b0 fs/read_write.c:713
 do_iter_write+0x188/0x670 fs/read_write.c:1018
 vfs_writev+0x1aa/0x2e0 fs/read_write.c:1091
 do_pwritev fs/read_write.c:1188 [inline]
 __do_sys_pwritev fs/read_write.c:1235 [inline]
 __se_sys_pwritev fs/read_write.c:1230 [inline]
 __x64_sys_pwritev+0x231/0x310 fs/read_write.c:1230
 do_syscall_64+0x2d/0x70 arch/x86/entry/common.c:46
 entry_SYSCALL_64_after_hwframe+0x44/0xa9
RIP: 0033:0x45d189
Code: 5d b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00 00 66 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 0f 83 2b b4 fb ff c3 66 2e 0f 1f 84 00 00 00 00
RSP: 002b:00007fadaac33c78 EFLAGS: 00000246 ORIG_RAX: 0000000000000128
RAX: ffffffffffffffda RBX: 0000000000025100 RCX: 000000000045d189
RDX: 0000000000000003 RSI: 00000000200004c0 RDI: 0000000000000006
RBP: 000000000118cf90 R08: 0000000000000000 R09: 0000000000000000
R10: 0000000008040000 R11: 0000000000000246 R12: 000000000118cf4c
R13: 00007ffd182e050f R14: 00007fadaac349c0 R15: 000000000118cf4c
Modules linked in:
CR2: 0000000000004007

Crashes (1):
Time Kernel Commit Syzkaller Config Log Report Syz repro C repro VM info Assets (help?) Manager Title
2020/08/12 23:27 upstream fb893de323e2 bc15f7db .config console log report ci-upstream-kasan-gce-selinux-root
* Struck through repros no longer work on HEAD.